https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T14:06:10.496577+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-35884 CVE-2020-35884 2026-10-14T14:06:10.498060+00:00

An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header.

 https://cve.radiocsirt.org/vuln/ghsa-7v2r-wxmg-mgvc GHSA-7v2r-wxmg-mgvc — HTTP Request smuggling in tiny_http 2026-10-14T14:06:10.498104+00:00

Affected: crates.io: tiny_http

HTTP pipelining issues and request smuggling attacks are possible due to incorrect Transfer encoding header parsing. It is possible conduct HTTP request smuggling attacks (CL:TE/TE:TE) by sending invalid Transfer Encoding headers. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.